logo

Cybercriminals are stealing iOS users' face scans to break into mobile banking accounts

ID: 577f0c56-eada-576a-9617-215370e66473

STIX ID: report--577f0c56-eada-576a-9617-215370e66473

Feed Name: The Register (Security)

Threat Score
75/100

Date Published: 2024-02-15

Date Updated: 2026-04-26

Author: Connor Jones

...
...

Researchers attribute a multilingual cybercrime group named GoldFactory with deploying a family of trojans (GoldPickaxe on iOS and Android variants) that harvest biometric face scans, identity documents and SMS messages via social engineering, TestFlight/MDM abuse and fake apps; attackers then use deepfakes and intercepted authenticators to remotely access victims' banking apps in Thailand and Vietnam and steal funds.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.